TORSION OF RATIONAL ELLIPTIC CURVES OVER 
CUBIC FIELDS AND SPORADIC POINTS ON X^n) 



FILIP NAJMAN 

Abstract. We classify the possible torsion structures of rational ellip- 
tic curves over cubic fields. Along the way we find a previously unknown 
torsion structure over a cubic field, Z/21Z, which corresponds to a spo- 
radic point on Xi(21) of degree 3, which is the lowest possible degree of 
a sporadic point on a modular curve X\(n). 



1. Introduction 

When trying to understand elliptic curves over number fields, an impor- 
tant problem is to classify the possible torsion structures. The first such 
classification was done by Mazur |23|, I24j . proving that the torsion of an 
elliptic curve over Q has to be isomorphic to one of the following 15 groups: 

Z/mZ,l < m < 12, m + 11, 
(1) ' ~ ~ r 

y ' Z/2Z Z/2mZ, 1 < m < 4. 

After this result, attention shifted toward number fields. Kamienny |14j 
proved that if a torsion point of an elliptic curve over a quadratic field has 
prime order p, then p < 13. This, when combined with a theorem of Kenku 
and Momose [20J, gave a complete list of possible torsion structures over 
quadratic fields: 

Z/mZ,l < m < 18, m / 17, 
Z/2Z Z/2mZ, 1 < m < 6, 
^ ' Z/3Z©Z/3mZ, m = 1,2, 

Z/4Z0Z/4Z. 

The author gave a similar complete list for the fields and Q(\/ — 3) (see 
[30]). and a procedure how to make such a list was developed by Kamienny 
and the author [To] . 

As one can see, much is known about the possible torsion structures of 
elliptic curves over Q and over quadratic fields. Unfortunately, already over 
cubic fields a classification of possible torsion structures of elliptic curves is 
not known. However, it is known that if an elliptic curve over a cubic field 
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has a point of prime order p, then p < 13 (see [33} 134]). Jeon, Kim and 
Schweizer [12] found all the torsion structures that appear infinitely often 
as one runs through all elliptic curves over all cubic fields: 

Z/mZ, 1 < m < 20, m ^ 17, 19, 
^ ' Z/2Z © Z/2mZ, 1 < m < 7. 

Jeon, Kim and Lee [10] constructed infinite families having each of the tor- 
sion structures from the list ([3]). 

However, it was unknown whether the list ([3]) is complete, i.e. if one 
runs through all elliptic curves over all cubic fields, do there exist torsion 
structures that appear only finitely many times? We show, by finding an 
elliptic curve with torsion Z/21Z over a cubic field, that the answer is yes 
and that the list (|3|) is not the complete list of possible torsion structures 
over cubic fields. 

The main purpose of this paper is to study the possible torsion struc- 
tures of all rational elliptic curves (meaning that all their coefficients are 
Q-rational) over all cubic fields. This is a natural question to consider as, 
apart from being interesting in itself, it is often important to study rational 
elliptic curves over extensions of Q when solving Diophantine equations (see 
for example [2]). 

The main result of this paper is the following theorem. 

Theorem 1. Let E/Q be a rational elliptic curve, and let K/Q be a cubic 
extension. Then E(K)t or s is one of the following groups 

Z/mZ, m = 1, . . . , 10, 12, 13, 14, 18, 21, 

^ Z/2Z©Z/2mZ, m = 1,2,3,4,7. 

The elliptic curve 16251 over Q(Cq) + is the unique rational elliptic curve 
over a cubic field with torsion Z/21Z. For all the other groups T in the list 
l^p, there exists infinitely many rational elliptic curves that have torsion T 
over some cubic field. 

To prove Theorem [IJ we will first need to solve the analogous problem for 
quadratic fields, which we do in Section [3l 

We prove Theorem [TJ by studying the action of the Galois group on the 
torsion points, division polynomials, and by finding the rational points on 
certain (modular) curves. 

Let us mention that a somewhat similar problem to the one considered 
in this paper is the problem of finding the possible torsion structures of 
rational elliptic curves with integral j-invariant |29[ [35] and with complex 
multiplication over number fields [U [3]. 

Recall that the gonality ^{X) of an algebraic curve X is the lowest degree 
of a nonconstant rational map from X to the projective line. We call points 
of degree d on the modular curves Yi(m, n) (see Section 2 for definitions 
of modular curves and note that we only consider modular curves with 
m = 1,2 in this paper), when d < 7(Y"i(m,ra)) sporadic. Since all the 
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modular curves Y\(m,n) that correspond to the torsion structures in the 
list ([I]) are of genus and have (infinitely many) rational points (since some 
of the cusps of Xi(m, n) are rational) and hence are of gonality 1. Similarly, 
all the modular curves Y\{m, n) that correspond to the torsion structures in 
the list (J2J are of genus < 2 (and hence have gonality 1 or 2), so it follows 
that there are no sporadic points of degree 1 or 2. Van Hoeij |36| found 
sporadic points of degree 6 on Xl(37) (of gonality 18), and of degree 9 on 
Xl(29) and Xi(31) (of gonality 11 and 12, respectively). 

The unique rational elliptic curve with 21-torsion over a cubic field hence 
gives us a degree 3 sporadic point, which is the lowest degree possible. By 
the method used to construct this point we rediscover van Hoeij 's degree 6 
point on Xi(37). 



2. Conventions and notation 

Throughout this paper, K will be a cubic field and L will be its normal 
closure over Q. This means that when K/Q is normal, then L = K, and 
otherwise L is a degree 6 extension of Q such that Gal(L/Q) ~ S3. We 
denote by M the unique field with the property that M is a subfield of L 
such that [L : M] = 3 (from which it follows that Gal(L/M) ~ Z/3Z). If K 
is normal over Q, this will mean that M = Q. 

Let E[n] = {P G E(Q)\nP = 0} denote the n-th division group of E over 
Q and let Q(E[nj) be the n-th division field of E. 

We will denote by E d a quadratic twist of E by d G Q*/(Q*) 2 . By ( n we 
will denote a nth primitive root of unity and by Q(Cn) + the maximal real 
subfield of Q(C„). 

We denote by ijj n the n-th division polynomial of an elliptic curve E (see 
[37] for details), which satisfies that, for a point P 6 E, ip n (x(P)) = if 
and only if nP = 0. As before, although the division polynomial depends 
on the curve E, we will leave E out of the index as it will be clear what 
elliptic curve we are referring to. A method we will often use throughout the 
paper for checking whether a fixed rational elliptic curve E obtains n-torsion 
over some extension of degree d is to factor ip n and then compute what the 
torsion is in the extensions generated by factors of degree Z, where l\d. In the 
special case when d = 2 one has to also check for the fields generated by the 
y-coordinates corresponding to the roots of linear factors of ip n . We call this 
method the division polynomial method. Note that the division polynomial 
method can also be effectively used in determining which, if any, twists of a 
given curve have n-torsion over the base field. 

If there exists a iT-rational isogeny <j> : E — > E' of degree n, this implies 
that Ker <f> is Gal(X/-R')-invariant cyclic group of order n and we will say 
that E/K has an n-isogeny. 

When counting rational elliptic curves, unless stated otherwise, we will 
count up to Q-isomorphism. When referring to specific elliptic curves we 
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will list them as they appear in Cremona's tables 0], as we already did in 
Theorem [TJ 

Denote by Yi(m,n) the affine modular curve whose K-rational points 
classify isomorphism classes of the triples (E, P m , P n ), where E is an elliptic 
curve (over K) and P m and P n are torsion points (over K) which generate a 
subgroup isomorphic to Z/mZ©Z/nZ. For simplicity, we write Y\(n) instead 
of Yi(l 3 n). Let Xi(m,n) be the compactiflcation of the curve Y\(m,n) 
obtained by adjoining its cusps. 

Denote by Yo(n) the affine curve whose if-rational points classify isomor- 
phism classes of pairs (E, C), where E/K is an elliptic curve and C is a cyclic 
(Gal^/i^-invariant) subgroup of E. Let Xq{h) be the compactification of 
Y (n). 

Recall that a Q-curve is an elliptic curve E, such that it is Q-isogenuos 
to all of its Gal(Q/Q)-conjugates. 
For computations we use Magma pp. 

3. Torsion of rational elliptic curves over quadratic fields 

The results of this short section will be needed in the proof of Theorem 
[H but are also interesting in their own right. They also provide a nice 
introductory exercise for the much harder cubic fields case. 

Theorem 2. Let E be a rational elliptic curve and F a quadratic field. 

a) The torsion of E(F) is isomorphic to one of the following groups 

l/ml, m = 1,..., 10, 12, 15, 16 
Z/2Z©Z/2mZ, l<m<6. 
^ ' Z/3Z©Z/3mZ, m = 1,2, 

Z/4Z©Z/4Z. 

b) Each of these groups, except for Z/ '15Z, appears as the torsion struc- 
ture over a quadratic field for infinitely many rational elliptic curves 
E. 

c) The elliptic curves 50B1 and 50^43 have 15-torsion over Q(v / 5), 
5052 and 450-B4 have 15-torsion over Q(\/—15). These are the only 
rational curves having non-trivial 15-torsion over any quadratic field. 

Remark 3. a) The elliptic curves 50B1 and 50 A3 are twists by 5 of 
each other, and hence become isomorphic over 

Q(\/5). Similarly, 

50B2 and 450B4 are twists of each other by —15 and become iso- 
morphic over Q(\/— 15). 
b) These elliptic curves are "exceptional curves", in the sense that they 
are the only elliptic curves (not just rational) over the respective 
quadratic fields with 15-torsion (see [151 EI] for details). 

Before we proceed with the proof of Theorem[2j we will prove the following 
lemma. 
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Lemma 4. Let E be a rational elliptic curve. Then in the family of all 
twists E d of E (including E itself) there is at most one elliptic curve with 
nontrivial n-torsion for n = 5,7, and at most 2 curves with 3-torsion. 

Proof. It is well known that if F = Q(\/c#), and n an odd integer then 

(6) E(F)[n] = E(Q)[n] © E d (Q)[n]. 

Thus it follows that E(Q) and E d (Q) cannot both have n-torsion for n = 5 
or 7, since an elliptic curve cannot have full re-torsion over a quadratic field. 

It is impossible that E has 3 twists with 3-torsion, as this would imply 
that, by an argument as in (|6|), E(F2) would contain (Z/3Z) 3 for some 
biquadratic F2 extension of Q. □ 

Proof of Theorem 0. The possible torsion structures of a rational elliptic 
curve over a quadratic field is obviously a subset of the list ([2]) . The equality 
([6]) rules out the possibility of re-torsion for n = 11, 13. Note that the number 
of points of order 2 over F on an elliptic curve 

E : y 2 = f{x) = x 3 + ax + b 

is equal to the number of roots of / over F. It follows that if E(Q) has 
no 2-torsion, then neither does E(F). Thus if E{F) had n-torsion, for 
n = 14, 18, it would follow that there exists an elliptic curve with n-torsion 
over Q, which is impossible. 

It can be seen from [111 Theorems 3.7, 3.8., 3.9., 3.10. and 3.11.] that 
there exist infinitely many rational elliptic curves with torsion Z/2Z © 
Z/10Z, Z/2ZffiZ/12Z, Z/3Z©Z/3Z, Z/3Z © Z/6Z and Z/4Z © Z/4Z. 

In [22;, Remark 2.6. (d)] one is given a construction which can be used to 
construct infinitely many rational elliptic curves with 16-torsion over qua- 
dratic fields. 

Finally, we wish to find all rational elliptic curves with 15-torsion over 
quadratic fields. Let E/Q be an elliptic curve which attains 15-torsion over 
a quadratic field. By © this implies that, 

(7) E(Q) tors ~ Z/3Z and E d {Q) tors ~ Z/5Z 

or vice versa. Suppose without loss of generality that it is as in ([7]). It also 
follows, since if E has a p-isogeny, so do all the quadratic twists E d of E, 
that E has to have a 15-isogeny. But there are only 4 families of twists of 
rational elliptic curves with a 15-isogeny |27} p. 78-80], those with j-invariant 

-25/2, -349938025/8, -121945/32, 46969655/32768, 

which are the twists of the elliptic curves 50A1, 50A2, 50B1 and 50B2, 
respectively. 

By the division polynomial method we find that 50B1 has 15-torsion only 
over Q(v5) and 50B2 has 15-torsion only over Q(\/— 15), and that 50A1 and 
50A2 have no twists with 5-torsion, completing the proof of the theorem. □ 
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4. Auxiliary results 

In this section we prove a series of results that we will need for the proof 
of Theorem [TJ 

Lemma 5. Let F/Q be a quadratic extension, n an odd positive integer, 
and E/Q an elliptic curve such that E(F) contains TL/nL. Then E/Q has 
an n-isogeny. 

Proof. As already mentioned in ([6]), if F = Q(^fd), then 

E(F)[n] = E(Q)[n] 8 E d (Q)[n]. 

Thus either E(Q) or E d (Q) has nontrivial n-torsion. If an elliptic curve has 
n-torsion then it also has an n-isogeny <ft (where the group generated by the 
point of order n is the kernel of the n-isogeny), and if an elliptic curve has 
an n-isogeny, then so does every twist of E. The statement of the lemma 
follows from these two facts. □ 

We will also extensively use the well-known classification of possible de- 
grees of cyclic isogenies over Q. 

Theorem 6 ([Ml CLU US ES]). Let E/Q be an elliptic curve with an n- 
isogeny. Then n < 19 or n £ {21, 25, 27, 37, 43, 67, 163}. // E does not have 
complex multiplication, then n < 18 or n S {21,25,37}. 

The following four results will be useful in controlling the 2-primary tor- 
sion of rational elliptic curves over cubic fields. 

Lemma 7 ( [31| Lemma 1]). Lf E(Q) has a nontrivial 2-Sylow subgroup, 
E(K) has the same 2-Sylow subgroup as E(Q). 

Proposition 8. Let M ^ Q(i), and let E/Q be an elliptic curve such 
that E(M)[2] = 0. Then the 2-Sylow subgroup of E(L) is either trivial 
or Z/2Z0Z/2Z. 

Proof Suppose E(L)[2] / 0. Write 

E : y 2 = f(x) = x 3 + ax + 6, 

where f(x) is irreducible over M. As L/M is Galois, it follows that since / 
has one root over L, all the roots of / are defined over M. Hence E(L)[2] ~ 
Z/2Z0Z/2Z. 

Suppose that E{L) has a point of order 4. As L does not contain i, it 
follows that the only possibility for E(L) to have a 4-torsion point is that 
E(L)[4\ ~ Z/2Z0Z/4Z. 

We now prove that a group of order 3 has to fix a line of Z/2Z © Z/4Z. 
Let G := Gal(L/M). We have the short exact sequence 

(8) -> E(L) [2] -> E(L) [4] E{L) [4]/E{L) [2] 
and it follows that 

(9) -> E(L)[2f -> E(L)[4f -> (E(L)[i]/ E(L)[2]f -> H\G, E(L)[2]) 
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It is easy to compute that H X (G, E{L){2]) = 0, and since E(L)[4]/E(L)[2] 
is a group of order 2, it follows that 

(E(L)[4]/E(L)[2}) G ~ Z/2Z, 

from which we conclude that E(L)[A\ G ^ 0. We conclude that E(M) has a 
2-torsion point, which is a contradiction. □ 

Proposition 9. Let M = Let E/Q be an elliptic curve with no Q- 

rational points of order 2. Then 

a) // E(K) has a point of order 4, then A(E) G -1 • (Q*) 2 , j(E) = 
-4t 3 (t + 8) for somet£Q and E(L)[4] ~Z/4ZffiZ/4Z. 

b) E(K) has no points of order 8. 

Proof. First note that from the assumption that £7(Q)[2] = 0, it follows that 
E(Q(i))[2] = 0. Suppose E(L)[2] / 0. Since L/Q(i) is Galois, it follows that 
E(L)[2] ~ Z/2Z©Z/2Z. 

If E(L) has a point of order 4, by the same argument as in the proof of 
Proposition [8] it follows that E(L)[4\ cannot be Z/2Z© Z/4Z. Thus 

£(L)[4] ~ Z/4Z©Z/4Z, 

and Q(-B[2]) = Q(£[4]). Note that for any elliptic curve E' , the field Q(E'[2]) 
contains Q(\/A) and ®(E'[4\) contains Q(i), and since Q(E[2]) is a S3 
extension of E, it follows that A is a square in Q(i), but not in Q, i.e. 
A(E) £ -1 • (Q*) 2 . 

By jni Lemma], since Gal(Q(-E[4])/Q) ~ S3, which is isomorphic to a 
subgroup of F24 = Z/3Z x D 8 , it follows that = -4t 3 (i + 8) for some 
i 6 Q. This concludes the proof of a). 

Suppose now E(K) has a point of order 8. It follows that E(L)[8] ~ 
Z/4Z© Z/8Z. Let G := Gal(L/M) and take the short exact sequence 



(10) -> B(X)[2] £?(L)[8] -> £(L)[8]/£(L)[2] 0. 

It follows that 
(11) 

-> £(L)[2] G -> £(L)[8] G (£(L)[8]/£(L)[2]) G -> tf^G, £(L)[2]). 

Note that £(L)[8]/.E(L)[2] ~ Z/2Z©Z/4Z and since we have shown in the 
proof of Proposition [8] that Z/2Z © Z/4Z has a G-invariant line, it follows 
that (E{L)[8]/E{L)[2]) G / 0. Now from the fact that H l {G,E{L) [2]) = 
it follows that E(L)[8] G / 0, from which it follows E(M)[2] / 0, which is a 
contradiction. □ 

Remark 10. Note that there exist elliptic curves such that Q(£'[2]) = 
Q(£[4]) and 

Gal(Q(£[2])/Q) ~ Gal(Q(£[4])/Q) ~ S 3 . 
The elliptic curve 1936D1 is such a curve. 
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We can combine Propositions [8] and [9] into the following corollary. 

Corollary 11. Let E/Q be an elliptic curve such that E(Q) has no points 
of order 4. Then E(K) has no 8-torsion and has a point of order 4 only if 
E(K)[2] = 0, M = Q(i), A(E) G -1 • (Q*) 2 , and j(E) = -At 3 (t + 8) for 
some t G Q. 

Proof. If E(Q) has a 2-torsion point, the statement follows from Lemma [71 
If E(Q) has no 2-torsion, the statement follows from Propositions [8] and 
1 □ 

The next step towards the proof of Theorem [T] is to control the growth of 
the 3-torsion, for which the following two propositions will be useful. 

Lemma 12. If E(M) does not have a point of order 3, neither does E(L). 

Proof. First note that if an elliptic curve gains points of order 3 over a cubic 
extension of M, then the 3-division polynomial ip3 has to split over M as 
-03 = /1/3, where f\ is a linear polynomial and ^3 is an irreducible cubic. 
The torsion points corresponding to f\ are not L-rational as they are defined 
over a quadratic extension of M. 

Suppose that E{L) has a 3-torsion point. The torsion points correspond- 
ing to f\ are not L-rational as they are defined over a quadratic exten- 
sion of M, so the only possibility is that (P) = E(L)[3] ~ Z/3Z. Let 
(a) = Gal(L/M). As P a / P, it follows that the 2 L-rational points of 
order 3 form an orbit under Gsl{L/K) of length 2, which is impossible by 
the Orbit Stabilizer Theorem. □ 

Proposition 13. Suppose E(K) has a point of order 9. Then E/Q has an 
isogeny of degree 9 or 2 independent isogenics of degree 3. 

Proof. Suppose the opposite, that E/Q does not have an isogeny of degree 9 
nor 2 independent isogenies of degree 3. Let {a) = Gal(L/M) and P G E(K) 
be a point of order 9. It is easy to see that E{L) has a 9-torsion point, and 
that E(Q) has a point of order 3 by Lemma [T2l Also, E{M) cannot have a 
point of order 9, since this would imply that E/Q has a 9-isogeny by Lemma 
which would contradict our assumption. 

We examine how a acts on P. Let E[9] = (P,Q) and P a = aP + (3Q. 
If ft = 0, then Gdl{L/K) would fix (P), which would imply that E/Q has 
a 9-isogeny, contradicting our assumption. Also P a G E(L) so (9 — a)P + 
P a = f3Q € E(L), so /3 has to be 3 or 6, otherwise the full 9-torsion would 
be defined over L, which would further imply that L = Q(Cq)> which is 
impossible since Gal(L/Q) ~ S3 and Gal(Q(£g)/Q) ~ Z/6Z. Furthermore, 
it follows that E(L)[9] ~ Z/3Z Z/9Z and from this M = Q(V = 3)- 

Let E[3] = (P', Q'), where P' G E(Q). Thus G = Gal(L/M) acts on (Q 1 ), 
and since G is a group of order 3, it follows that (Q') = (Q'} and hence 
E(M) has full 3-torsion. By Lemma[5]it follows that E/Q has 2 independent 
3-isogenies, giving a contradiction. □ 
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We now move to the study of the p-torsion of E{K) for p > 3. 
Lemma 14. For p > 3 prime, E(L)[p] = or TLjpTL. 

Proof. This follows from the fact that E(L)[p] ~ TLjpTL © TLjpTL would, by 
the Weil pairing, require the p-th cyclotomic field Q(Cp) to be contained in 
L, which is impossible. □ 

Next we study for which p, E(M)[p] = implies E(L)[p] = 0. We prove 
a more general statement, that does not apply only for cubic extensions. 

Lemma 15. Let p,q be odd distinct primes, F2/F1 a Galois extension of 
number fields such that G&1(F 2 /Fi) — Z/gZ, and E/F\ an elliptic curve 
with no p-torsion over F\. Then if q does not divide p — 1 and Q(( p ) F2, 
then E(F 2 )[p]=0. 

Proof. Since if one point of order p is defined over F2, then so are all its 
multiples, it follows that either p — 1 or p 2 — 1 points of order p are defined 
over F2, but not over F\. But it is impossible that all p 2 — 1 appear because 
ofQ(C P )£F 2 . 

Let (a) = G&l(F2/ Fi), P be a point of order p in E(F 2 ) and then note 
that P a 7^ P, and since Ga^i^/^i) acts on (P), it follows that the orbit 
of P under the action of Ga^^/Fi) has length q, which would imply that 
(P) breaks up into one orbit of length 1 (the identity on E(F 2 )), and orbits 
of length q, which is a contradiction, by the Orbit Stabilizer Theorem, with 
the fact that q does not divide p—1. □ 

In this paper we will use only the special case q = 3, F\ = M and F2 = L 
of Lemma [I5j We must also be able to show the nonexistence of points of 
order p 2 in E(L). Again, we prove a more general statement. 

Lemma 16. Let m be a positive integer, p a prime not dividing m, F2/F1 
a Galois extension of number fields such that Gal(F 2 /Fi) ~ TLjpTL, E/F% 
an elliptic curve, and suppose E(Fi) D TLjrnL and E(F\) 7$ Tu/m 2r L. Then 
E{F 2 ) ^ TLjm 2 TL. 

Proof. Suppose the opposite. Let P E E{F\) be of order m and (a) = 
Gal(F 2 /Fi). Let 

S = {Q£E(F 1 )\mQ = P}. 

The set S has m 2 elements, on which Gal {F 2 /F\) acts. By the Orbit Stabi- 
lizer Theorem, the orbits under the action of Ga^i^/Fi) have to have length 
p, since if a point in S was left fixed, it would mean that it is Fi-rational. 
This implies that S decomposes into orbits of p elements each, which is a 
contradiction with our assumption that p does not divide m. □ 

We will again use Lemma [TBI only in the special case q = 3, F\ = M and 
F 2 = L. For n coprime to 6, the existence of a point of order p in E(K) will 
imply the existence of an n-isogeny over Q, as the following lemma shows 
us. 
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Lemma 17. Let n be an odd integer not divisible by 3 and suppose E(K) 
has a point of order n. Then E/Q has an isogeny of degree n. 

Proof. First note that E(L) has a point P of order n. Let 

(a) = Gal(L/M), (r) = G&\{L/K), (a,r) = Gal(L/Q). 

As P is K-rational, it follows that P T = P. Let E[n] = {P,Q} and P a = 
aP + PQ £ E(L). But as (b-a)P + P a = f3Q G E(L). It follows that (3 = 
otherwise, E(L) would have full /-torsion, for some l\n, which is impossible 
since L does not contain any Ith. roots of unity. Hence 

= kP for all fj, G Gal(L/Q), 

and since the action of Gal(Q/Q) on (P) factors through Gal(L/Q), it follows 
that 

P^ = kP for all [i G Gal(Q/Q), 
which means that E/Q has an n- isogeny. □ 

In the special case when K = L, the conclusion of LemmafTTl follows when 
re is a multiple of 3. 

Lemma 18. Suppose K = L, i.e. K/Q is a Galois extension. Let n be an 
odd integer and suppose E{K) has a point of order n. Then E/Q) has an 
isogeny of degree n. 

Proof. The proof follows by a similar argument as in Lemma[T7]and by using 
the fact that Q(Cfc) is not contained in K, for any divisor k > 3 of n. □ 

5. Proof of Theorem Q] 

We are now ready to prove Theorem [H which we will do in a series of 
Lemmas and Propositions. Recall that if a point in E(K) has prime order 
p, then p < 13 (see 

Lemma 19. The 3-Sylow subgroup of E(K) is isomorphic to a subgroup of 
Z/9Z. 

Proof. This follows by |28} Theorem (4.1)] and by the Weil pairing. □ 
Lemma 20. E(K)[5] = E(Q)[6\ and E{K)[ll] = 0. 

Proof. By Lemma [T5l E(L) has 11-torsion only if E(M) has 11-torsion, 
which is never true, as rational elliptic curves cannot have 11-torsion over 
Q or over a quadratic field, by Theorem [2j Hence E{K) has no 11-torsion. 

By Lemma [T5l and Lemma [TBI and by a similar argument as for the 11- 
torsion, it follows that E(L) [5] = E(Q) [5] and hence E(K) [5] = E(Q) [5] . □ 

Lemma 21. E{K) has no points of order 35, 49, 65, 91 or 169. 

Proof. This follows by Lemma [T7] and Theorem [6j □ 

Lemma 22. There exists no rational elliptic curves with points of order 15 
or 16 over a cubic field. 
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Proof. As E(L)[5] = E(M)[S\ and E(M)[3] = =>• S(L)[3] = by Lemmas 
LT5l and LT2t it follows that the only way for E(L) to have 15-torsion is for 
E(M) to have 15-torsion. 

It follows that, by Theorem[2]c), E is 50B1, 50B2, 50A3 or 450B4. By the 
division polynomial method, we find that none of these curves have points 
of order 15 over any cubic field. 

If E(Q) has a non-trivial 2-Sylow group, then the 2-Sylow subgroups of 
E(Q) and E(K) are equal and hence E(K) has no points of order 16. If 
the 2-Sylow subgroup of E(Q) is trivial, then by Corollary II 1\ E(K) has no 
points of order 8. □ 

Proposition 23. The elliptic curve 162i?l has torsion isomorphic to Z/21Z 
over Q(Cq) + - This is the unique pair (E,K) of a rational elliptic curve E 
and a cubic field such that E(K) has a point of order 21. 

Proof. By Lemma[[2l if E{M) tors = 0, or Z/7Z, then E(L)[3] = 0. Suppose 
now that E(K)[2l] D Z/21Z. By Lemma HSJ it follows that E/Q has an 
isogeny of degree 7, and since it has a 3-torsion point, it also has a 21- 
isogeny. There are 4 curves (up to Q-isomorphism) with a 21-isogeny |27^ 
p. 78-80]. These are the curves in the 162B or 162C isogeny classes. Note 
that the 162B isogeny class is a —3 twist of the 162C class. 

By the division polynomial method we find that the only twists of the 
curves in the 162B and 162C isogeny classes with non-trivial 3-torsion are 
the curves 162C1, 162C3, 162B1 and 162B3. By the division polynomial 
method, we find that only 162B1 has a 7-torsion point over a cubic field, 
the field Q(C9) + > which is generated by x 3 — 3x 2 + 3. □ 

Note that since 162B1 is the unique curve with 21-torsion over any cubic 
field and since it has torsion exactly Z/21Z, this means that there exist 
no points of order 21n on rational elliptic curves over cubic fields, for any 
integer n > 2. 

Remark 24. Note that in |31|, Remark 2] we misstated that from the fact 
that 

(12) A (21)(Q(C 9 ) + ) = X (21)(Q) 

(note that Kj = Q(C9) + > using the notation of |31| ) one can conclude that 
there are no elliptic curves with 21-torsion over Q(Cq) + i while what should 
have been written is that from (|12p we can determine whether 21-torsion 
appears over Q(C9) + by checking whether twists of rational elliptic curves 
with rational 21-isogeny have 21-torsion over Q(Cq) + - The point of the 
remark, that if we could find out whether Yi(25)(Q(£g) + ) = 0, then we 
could completely classify the possible torsion groups of elliptic curves over 
Q(C9) + , remains true. 

Lemma 25. E(K) does not have points of order 20, 24, 26, 28, 36 or 39. 
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Proof. Suppose E(L) has a 20-torsion point. Then E(M) has to have a 
5-torsion point by Lemma [TH and thus by [21j . have a model 

(13) E : y 2 + (1 - t)xy - ty = x 3 - tx 2 for some t G Q*. 

If E(Q) had a 4-torsion point, it would follow that it has a 20-torsion point 
which is impossible. Thus by Corollary II 11 it follows that £7(Q)[4] = and 
A(E) = — k 2 for some k G Q*. Hence 

—k 2 = A(E) = t 5 (t 2 — lit — 1) 

for some t G Q*, which is equivalent to 

X : y 2 = t 3 + lit 2 -t 

having rational points with t G Q*. But X(Q) = {0, (0, 0)}. 

If E(K) had a 24-torsion point then E(Q) would have to have a 8-torsion 
point by Corollary II li By Lemma [T2l it also has to contain a 3-torsion point 
and hence a 24-torsion point which is impossible. 

Suppose E(K) D Z/26Z. It follows by Lemma H7] that E/Q has an 
isogeny of degree 13, and furthermore that i?((Q))[2] = 0. Since the points of 
the 13-cycle become rational over K, it follows that if is a splitting field of 
a polynomial, and hence Galois. It follows that E(K) has full 2-torsion and 
hence E(K) D Z/2Z Z/26Z. 

By [26] an elliptic curve with a 13-isogeny over Q has j-invariant 

, _ {t 2 + 5t + 13) (t 4 + 7t 3 + 20t 2 + lgf + l) 3 

It follows that £^ is a quadratic twist of an elliptic curve E$ with discriminant 
A(E ) = t(t 2 + 5t + 13) 2 (t 4 + 7t 3 + 20t 2 + 19f + l) 6 (t 2 + 6t + 13) 9 

x(t 6 + 10t 5 + 46t 4 + 108t 3 + 122t 2 + 38t - l) 6 , 

and thus A(E) = u 12 A(Eq) for some u G Q x . The curve E gains full 
2-torsion over a cubic field only if A(E) is a square which happens only if 

X : y 2 = x(x 2 + 6x + 13) for some x, y G Q x 

has solutions. But X(Q) = {0, (0,0)}, and hence that is impossible. 

Suppose E{K) has a 28-torsion point. It follows that E/Q has a 7-isogeny 
by Lemma [T71 If E(Q) had a 4-torsion point, this would imply that E/Q 
has a 28-isogeny, which is impossible by Theorem El Thus E(Q) does not 
have a 4-torsion point and by Corollary 1111 it follows that L is not a Galois 
extension of Q and A(E) = —k 2 , for some k G Q*. 

Note that since E cannot have 2 independent rational 7-isogenies, it fol- 
lows that the kernel of the rational 7-isogeny is equal to E(K)[7]. As the 
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points in the kernel of the rational 7-isogeny are defined over a Galois ex- 
tension of Q, it follows that they must be defined already over Q, since they 
cannot be -rational but not Q-rational (because K/Q is not Galois). 

Hence E(Q) has points of order 7, and by [21], it follows that E is of the 
form 
(14) 

E : y 2 +(-t 2 +t+l)xy+{-t 3 +t 2 )y = x 3 +(-t 3 +t 2 )x 2 , for some t G Q,t G" {0, 1}. 
and that 

-k 2 = A(E) = t 7 (t - l) 7 (t 3 - 8t 2 + 5i - 1), 

which is equivalent to is a square in Q, which is equivalent to 

X : y 2 = t(t + l)(t 3 + 8i 2 + 5t + 1), 

having rational points such that t {0, —1}. But the Jacobian J of X has 
rank over Q and it is an easy computation in Magma to show that 

X(Q) = {oo,(0,0),(-l,0)}, 

and thus completing the proof that there are no rational elliptic curves with 
28-torsion over a cubic field. 



Suppose E(K) has a 36-torsion point. This implies that E(K) has a 
3-torsion point by Lemma [12] and by Corollary [11] either a point of order 
4 or no 2-torsion. Also, by Lemma I13| E/Q has to have a 9-isogeny or 2 
independent isogenics of degree 3. 

Suppose first that E(Q) has a 4-torsion point, and hence a 12-torsion 
point. If E/Q had a 9-isogeny, this would imply that E/Q is 2-isogenous 
to a rational curve which has a 36-isogeny, which is impossible by Theorem 
[6] On the other hand, by [21} Main Result 2.], an elliptic curve with 2 
independent 3-isogenies cannot have a 12-torsion point. 

Suppose now that E(Q) has no 2-torsion. We split this case into 2 sub- 
cases: when E(Q) has a rational 9-isogeny, and when E has 2 independent 
rational isogenies of degree 3. 

Suppose E has a 9-isogeny. Then, by [21] [13], E is a twist of an elliptic 
curve Eq with j-invariant 

t 12 - 72t 9 + 1728t 6 - 13824t 3 
(15) J = , t G Q\{0, 3} 

and 

A(E ) = 2985984i 3 - 80621568, 

and since E has to be a twist of Eq, it follows that A(E) = u 12 A(Eq), for 
some u G Q x . By Corollary II 11 the curve E gains a 4-torsion point over a 
cubic field only if —y 2 = A(E) ^ has solutions, which is equivalent to 

X:y 2 = t 3 + 27, t G Q\{0, —3},y G Q 



having a solution. But X(Q) = {0, (-3,0)}. 
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Suppose now that E has 2 independent rational 3-isogenies and that E 
gains a point of order 9 over K. By the same argumentation as in the proof 
of Proposition [HI it follows that M = Q(\/ — 3). But since E has no rational 
4-torsion, but has a 4-torsion point over K , by Corollary [Til it follows that 
M = Q(i), which is a contradiction. 

If E(K) had a 39-torsion point, this would imply that E(Q) has a 3- 
torsion point by Lemma [12] and has a 13-isogeny by Lemma [TTl But this 
would imply that i?/Q has a 39-isogeny, which is impossible by Theorem 

E □ 

Lemma 26. E{K) cannot have subgroups isomorphic to Z/2Z © Z/10Z, 
Z/2Z © Z/12Z or Z/2Z © Z/18Z. 

Proo/. Suppose £(2f) D Z/2Z © Z/10Z. By Lemma [13 this implies that 
E(Q) has a 5-torsion point. This implies, by |21|. Table 3.], that E has a 
model as in (I13p . It also follows, since E(Q) cannot contain Z/2Z©Z/10Z, 
that i?((Q))[2] = 0, and that E gains full 2-torsion over some cubic field. 
This happens if and only if the discriminant A(2£) is a square in Q x , i.e. 
the equation 

A(E) =y 2 =t 7 - llt G - t 5 , for some y, t G Q x 

has solutions. Dividing out by t 4 and by change of variables we get 

X : A 2 = t 3 - lit 2 - t, for some A, t G Q x . 

The curve X is an elliptic curve and X(Q) ~ Z/2Z, where the rational 
points are and (0,0). Thus E(K) ^ Z/2Z© Z/10Z. 

Suppose E(K) D Z/2Z © Z/12Z. First note that by Lemma HI E(Q) 
has a 3-torsion point. Now E(Q) has to either have a 4-torsion point or no 
2-torsion by Lemma [7] and Corollary [TTJ 

If E(Q) had a 4-torsion point, then by Lemma E(Q) D Z/2Z © Z/4Z 
from which it would follow that E(Q) D Z/2Z©Z/12Z, which is impossible. 

If E(<Q) had trivial 2-torsion, then if/Q would have to be a Galois ex- 
tension for E{K) to have full 2-torsion. But then by Corollary [TTl E{K) 
cannot have points of order 4, which is a contradiction. 

Suppose E(K) D Z/2Z © Z/18Z. First note that this implies that £7(Q) 
has a 3-torsion point by Lemma H2J By Lemma [T3| E/Q has either a 9- 
isogeny or two independent isogenies of degree 3. 

Suppose now that E(Q) has a 2-torsion point. Then it follows, by Lemma 
[71 that E(Q) has full 2-torsion. If E/<Q had a 9-isogeny, this would imply that 
there exists an elliptic curve with a 36-isogeny over Q, which is impossible. 
By |21[ Proposition III. 2. 3], an elliptic curve with 2 independent 3-cycles 
cannot have full 2-torsion. Thus it follows that £'(Q)[2] = and from this 
that K/Q is a Galois extension. Now it follows, by Lemma [TBI that E/Q in 
fact has a 9-isogeny. 
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By |21L [13] , since E has a 9-isogeny, it is a twist of an elliptic curve Eq 
with j-invariant as given in flE]) and A(E ) = 2985984t 3 - 80621568, and 
since E has to be a twist of Eq, it follows that A(E) = u 12 A(Eq), for some 
u £ Q x . The curve E gains full 2-torsion over a cubic field only if A(E) is 
a square, which is equivalent to 

X :y 2 = t 3 -27, f G Q\{0,3},y G Q 

having a solution. But X(Q) = {0, (3, 0)}, so there exist no such curves. □ 

This completes the proof that the groups that appear as torsion groups 
of rational elliptic curves over cubic fields are contained in the list @ . Note 
first that by |12[ Lemma 3.2 a)], all of the groups from the list ([1]) ap- 
pear infinitely often and the group Z/21Z has already been dealt with in 
Proposition [23] 

Note that any elliptic curve E/Q with torsion isomorphic to Z/9Z over Q 
gains a 2-torsion point over a cubic field K defined by the cubic polynomial 
f(x), when E is written in short Weierstrass form E : y 2 = f(x). Then by 
Lemmas [25] and [26] it follows that E(K) tors ~ Z/18Z. 

It remains to prove, for each of the groups T = Z/13Z, Z/14Z and Z/2Z© 
Z/14Z, that there exist infinitely many elliptic curves E and cubic fields K 
such that E(K) tors ~ T. 

We will deal with the groups Z/14Z and Z/2Z © Z/14Z simultaneously 
in the following proposition. 

Proposition 27. There exists infinitely many elliptic curves E/Q such that 
there exists a cubic field K over which E(K)t ors — Z/14Z and there exists 
infinitely many elliptic curves E/Q such that there exists a cubic field K 
over which E{K) tors ~ Z/2Z © Z/14Z. 

Proof. Let E/Q be an elliptic curve such that E(Q) tors ~ Z/7Z. By, [21] . 
this curve has the model as given in (I14p If E is written in short Weierstrass 
form y 2 = f(x), then E gains a point of order 2 over the cubic field K 
generated by /. We will show that E{K) t0 rs — Z/14Z. By Lemma l25| 
E(K) cannot have a point of order 28, so it only remains to show that 
E(K)tors & Z/2Z © Z/14Z 

If E gained full 2-torsion over K, this would imply that 

A(E) = t 7 (t - l) 7 (t 3 - 8t 2 + 5t - 1) 

is a square in Q, which is equivalent to 

X :y 2 =t(t- l)(t 3 - 8t 2 + 5t - 1), 

having rational points such that t {0, 1}. But the Jacobian J of X has 
rank over Q and it is an easy computation in Magma to show that 

X(Q) = {oo,(0,0),(l,0)}, 

proving the claim. 

To prove that there exist infinitely many curves -E/Q such that for each 
curve there exists a cubic field K such that E(K) tor s — Z/2Z © Z/14Z, 
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we note that every elliptic curve from the infinite family of elliptic curves 
having torsion Z/2Z © Z/14Z over a cubic field from |101 Theorem 4.2] has 
rational j-invariant. This is a very lengthy but completely straightforward 
calculation, and hence we leave it out. 

The fact that these curves have rational j-invariant does not yet prove 
that the curves are rational, but just that they are quadratic twists by 
5 G Ok of some rational elliptic curve. We need to prove that in fact 5 is 
rational. 

Let E± be one of the curves from the family [IP} Theorem 4.2] and let 
E be a rational elliptic curve with the same j-invariant and denote (a) = 
Gal(.fsy<Q>). As already noted E 1 = E s . Let P G E S (K) be a point of order 
7. It follows that P a is a point of order 7 in E a ^ and that P a is a point 
of order 7 in E a ^ s \ 

Now we will show that in a family of quadratic twists over a cubic field 
K there can be only one elliptic curve with a point of order 7. Suppose 
that E2/K and E^/K are quadratic twists by a d G K x which are not 
if -isomorphic, and that both have a point of order 7. Then it follows that 

E 2 {K(Vd))[7] ~ E 2 (K)[7] ® E% (K) [7] D Z/7Z©Z/7Z, 

or in other words E has full 7-torsion over K{yd). Since K{yd) has to 
contain £7 it follows that K(yd) = Qid)- But elliptic curves over Q(C?) 
cannot have full 7-torsion (see |25j). 

Thus it follows that E s , E a ^ and E a ^ are all if-isomorphic which 
means that E s is a Q-curve. It is known [7] that Q-curves are either rational 
or defined over a (2, . . . , 2) extension of Q. Hence E s is defined over Q, 
completing the proof. □ 

Remark 28. In the proof of Proposition I27| once we have proven that E s , 
E a ^ and E* 2 ^ are all if -isomorphic, an alternative way of proving that 
E s is rational, without using Q-curves can be done in the following way. 
We can see that E s , E^ and E a ^ are if-isomorphic if and only if 

5a(5),a(5)a 2 (5) and 6a 2 (5) 

are all squares in K. But since 

N K/Q (5) = 5a(5)a 2 (5) = k€Q, 

it follows that 

5 = ka 2 for some k G Q and a G K , 

or in other words that E\ is a rational twist of E/Q, and hence can be 
defined over Q. 

Note that it is not hard to prove that there exist rational elliptic curves 
with non-trivial 13-torsion over cubic fields; a short search in Cremona's 
tables shows that 147B1 is such a curve. The hard part is proving that 
there are infinitely many such curves. In fact, 147B1 is the only curve with 
this property that we found in our (short) search. 



TORSION OF ELLIPTIC CURVES OVER CUBIC FIELDS AND POINTS ON X 1 {n) 17 

Let {±1} < A < (Z/iVZ) x and define the congruence subgroup 



For N prime, the modular curve Y&(N) corresponding to A has the follow- 
ing moduli space interpretation: a F-rational point on Y&(N) corresponds 
to an isomorphism class of pairs (E, (P)) of an elliptic curve E/F and a 
subgroup (P) G E(Q) of order N such that every a G Gal(Q/K) acts on 
(P) as multiplication by some a(a) G A. Let X A (N) be the compactifi- 
cation of Y A (N). Note that if A = {±1}, then X A (N) = Xi(N) and if 
A = (Z/iVZ) , then X A (N) = Xi(iV), and that all intermediate curves 
between Xi(N) and Xq(N) are of the form X A (N), for some A. 

We now prove that there are in fact infinitely many rational elliptic curves 
with non-trivial 13-torsion over some cubic field. 

Proposition 29. There exists infinitely many elliptic curves £7/Q such that 
there exists a cubic field K such that E(K) has a 13-torsion point. 

Proof. Let A = {±1,±3,±4} C (Z/13Z) X . Then by Theorem 1.1.], 
X A (13) has genus 0. As noted above, the elliptic curve 147B1 together with 
a 13-isogeny, represents a point on X A (13)(Q) and hence we conclude that 
Xa(13)(Q) has infinitely many points. 

Now let (E, {R)), where E/Q and (R) is a 13-cycle of E, be a point on 
X A (13)(Q). If every a G Gal(Q/Q) acts on {R) by multiplication by an 
element of (Z/13Z) X of order 3, then it would follow that R is defined over 
a cubic field and we are done. 

Suppose the opposite, that a acts on (R) by multiplication as an element 
of (Z/13Z) X of order 6. It can be seen, however that when E is written 
in short Weierstrass form, a actually permutes the three x-coordinates of 
±i?, ±3i? and ±4i? and since x(T) = x(—T) for any T G E(Q), this implies 
that the x coordinates of the points in (i?) are defined over a cubic field 
K. Let F C K be the field of definition of (R). If F = K we are done so 
suppose F = K(y/5), for some 5 G K. Then E(F) has a point of order 13 
and since 



it follows that either E or E s have a i^-rational point of order 13. If E(K) 
has a point of order 13 we are done. Suppose then E S (K) has a point of 
order 13 and let (r) = Gal(if/Q). 

Then using the same argument as in the proof of Proposition 1271 one can 
prove that E s , E T ^ and E T w all have to be K- isomorphic and hence it 
follows that E is a Q-curve and it follows that E s has to be defined over Q. 

Thus for every rational elliptic curve E represented by a point on Xa(13), 
there exists a rational twist E' such that there exists a cubic field K with 
the property that E'(K) has a point of order 13. □ 




E(F)[13] = E(K)[13] +E S (K)[13], 
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6. Sporadic points on X\(n) 

As we have seen in Proposition 1231 there exists a sporadic point of degree 
3 on Xi(21). This point was essentially constructed by starting with an 
elliptic curve E/Q with a 21-isogeny and then using the division polynomial 
method to determine the minimal degree of a field K over which the points 
in the Gal(Q/Q)-invariant subgroup of order 21 of some twist of E becomes 
if-rational. 

It is a natural question to ask whether the same procedure can be used 
to find other sporadic points by starting with other rational elliptic curves 
with isogenies. We have tried this and this method gives us (only) a degree 
6 point on Xl(37); we describe the procedure used to find it below. 

There are 2 families of twists of elliptic curves with 37-isogenies. We start 
with the elliptic curve E = 1225-ffl, take a short Weierstrass model 

y 2 = x 3 - 10395x + 444150 

of it and factor (over Q) its 37-division polynomial V37 finding a degree 6 
factor 

f 6 = x 6 - 3150a; 5 + 796635a; 4 - 75770100a; 3 + 3111596775a; 2 

-44606598750a; - 85333003875. 

This implies that the x-coordinate of a point of order 37 of E is defined 
over a sextic field F and since twisting does not change the roots of division 
polynomials, it follows that there exists an unique twist (over F) of E such 
that it has a point of order 37 over F. This can be found simply by finding 
over which quadratic extension F{y/S) the points of order 37 become defined, 
and then the quadratic twist we are looking for is E s . Let w be a root of 
/g. We compute that 

5 = w 3 - 10395w + 444150 

and that E 5 indeed has a point of order 37. Thus E s , together with a point 
of order 37 represents a sporadic point of degree 6 on Xi(37), which has 
gonality 18. Note that this is the same curve which has already been found 
by van Hoeij [36j. 
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